CVE-2026-63936

Source
https://cve.org/CVERecord?id=CVE-2026-63936
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-63936.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-63936
Downstream
Published
2026-07-19T14:55:33.942Z
Modified
2026-07-21T03:47:39.203366773Z
Summary
iio: adc: mt6359: fix unchecked return value in mt6358_read_imp
Details

In the Linux kernel, the following vulnerability has been resolved:

iio: adc: mt6359: fix unchecked return value in mt6358readimp

In mt6358readimp(), the variable valv is passed to regmapread() but the return value is not checked. If the read fails, val_v remains uninitialized and its random stack content is subsequently reported as a measurement result.

Initialize val_v to zero to ensure a predictable value is reported in case of bus failure and to prevent potential stack data leakage. This also satisfies static analyzers that might otherwise flag the variable as used uninitialized.

Database specific
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/63xxx/CVE-2026-63936.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
3587914bf61df7924933530353d840378cdc4973
Fixed
6258bfec51e894ea97b8e69f3cde7af269b37de9
Fixed
944082fdb0284a31c0b37a88c8a1d4404da3a6d9
Fixed
a72f8e51d6ee66c255a8a93a4421b8a538d112a8
Fixed
f9bbd943c34a9ad60e593a4b99ce2394e4e2381b

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-63936.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.11.0
Fixed
6.12.93
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.35
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.0.12

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-63936.json"